Serial console servers / out-of-band access appliances: Console servers (Opengear, Lantronix, Digi and similar) hold

Impact

Console servers (Opengear, Lantronix, Digi and similar) hold plaintext-equivalent access to every device's console including switches and BMCs, run long-lived embedded Linux, and are the deliberate bypass path around all network segmentation

Who can reach it

Network / OOB LAN

What to do

Bring the console-server fleet into the same patch and credential-rotation cadence as the compute; require per-device authentication rather than a shared console password. Frequently owned by the facility, not the operator

References